Oracle Life Sciences Empirica Signal
Monthly
Unauthorized data manipulation in Oracle Life Sciences Empirica Signal 9.2.1 through 9.2.3 (Common Core component) allows a low-privileged, network-authenticated attacker to create, delete, or modify critical data and read a subset of accessible data over HTTP. The scope-changed flaw (rooted in improper access control, CWE-284) can significantly impact additional products beyond Empirica Signal itself, and Oracle rates it CVSS 3.1 8.5. There is no public exploit identified at time of analysis, and EPSS is very low at 0.03% (8th percentile).
Unauthorized data manipulation in Oracle Life Sciences Empirica Signal 9.2.1 through 9.2.3 (Common Core component) allows a low-privileged, network-authenticated attacker to create, delete, or modify critical data and read a subset of accessible data over HTTP. The scope-changed flaw (rooted in improper access control, CWE-284) can significantly impact additional products beyond Empirica Signal itself, and Oracle rates it CVSS 3.1 8.5. There is no public exploit identified at time of analysis, and EPSS is very low at 0.03% (8th percentile).